Enroll in VMware Workspace ONE (AirWatch)

Created: Modified: Documentation

When using AirWatch with API, GroundControl adds several features to the standard Enroll / Perform MDM Command action.

Just before a deployment begins, GroundControl will use the AirWatch API to unenroll the device. This ensures that the enrollment is treated as “new” by AirWatch. There is no switch for this; GroundControl automatically enables this feature when you add valid AirWatch API credentials in Admin.

GroundControl will also allow you to do the following:

Pre-Enrollment Actions
  • Clear Passcode: Clears the passcode of a device, even when the device is not erased or re-provisioned.
  • Remove Device Tag IDs: Removes any tags associated with a device in AirWatch. This can be done without erasing the device or deleting its enrollment. Keep in mind GroundControl accepts only tag IDs, not tag names.
  • Delete from AirWatch: Deletes the device, which ensures that the enrollment is treated as “new”.
  • Pre-register to Username: This provides the option of assigning a DEP device to a specific user after activation. This is helpful if you want to use a profile that doesn’t require authentication, which will require a user name and password.
  • Lookup Username:  Use this feature to capture more data from a particular user in Airwatch. For example, you can “look up” username 12345 in AirWatch. If user 12345 has existing data for First Name, Last Name and Email info, we will fetch this information from AW so you can personalize the device by using User Attributes elsewhere in your workflow.
Enrollment
  • Enroll device: This provides the option of enrolling the device(s) you’re deploying to into Airwatch.
Post-Enrollment Actions
  • Set Organization Group ID: This will change the Organization Group after the DEP device is activated, and will move it from existing to another.
  • Set Device Tag IDs: You may assign a comma-delimited list of AirWatch tags to the device. GroundControl accepts only tag IDs, not tag names. See below.
  • Set Asset Number: Set the Asset Number field in Airwatch based on the data in GroundControl.
  • Set Friendly Name: Assign the device a name of your choice. This is helpful for easier identification.
  • Assign Staged Device to User: For more info on this feature, click here.
  • Sync Device (recommended): 

Discovering an AirWatch Tag ID

Because of limitations in AirWatch’s APIs, GroundControl requires that you enter the ID of each AirWatch device tag, not the tag name.

To determine the ID of a tag:

  1. Log into your VMware Workspace ONE console.
  2. Click Groups & Settings > All Settings > Devices & Users > Advanced > Tags.
  3. Hover over the tag and notice the URL of the tag — if you don’t see the URL when hovering, right-click and choose Copy URL or the equivalent function in your browser.
  4. The Tag ID is the last numeric part of the URL, for example “10579” in this example: https://airwatchserverhostname/AirWatch/Settings/EditTag/10579